auditor-lambda 0.2.6 → 0.2.9

package/schemas/coverage_matrix.schema.json

@@ -9,7 +9,7 @@
       "type": "array",
       "items": {
         "type": "object",
-        "required": ["path", "classification_status", "audit_status"],
+        "required": ["path", "unit_ids", "classification_status", "audit_status", "required_lenses", "completed_lenses"],
         "properties": {
           "path": { "type": "string" },
           "unit_ids": {
@@ -39,9 +39,9 @@
             }
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/critical_flows.schema.json

@@ -31,11 +31,15 @@
           "notes": {
             "type": "array",
             "items": { "type": "string" }
+          },
+          "confidence": {
+            "type": "string",
+            "enum": ["high", "low"]
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/file_disposition.schema.json

@@ -25,9 +25,9 @@
           },
           "reason": { "type": "string" }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/finding.schema.json

@@ -11,7 +11,8 @@
     "confidence",
     "lens",
     "affected_files",
-    "summary"
+    "summary",
+    "evidence"
   ],
   "properties": {
     "id": { "type": "string" },
@@ -54,13 +55,14 @@
     "summary": { "type": "string" },
     "affected_files": {
       "type": "array",
+      "minItems": 1,
       "items": {
         "type": "object",
         "required": ["path"],
         "properties": {
           "path": { "type": "string" },
-          "line_start": { "type": "integer" },
-          "line_end": { "type": "integer" },
+          "line_start": { "type": "integer", "minimum": 1 },
+          "line_end": { "type": "integer", "minimum": 1 },
           "symbol": { "type": "string" }
         },
         "additionalProperties": false
@@ -70,17 +72,20 @@
     "likelihood": { "type": "string" },
     "evidence": {
       "type": "array",
+      "minItems": 1,
       "items": { "type": "string" }
     },
     "reproduction": {
       "type": "array",
+      "minItems": 1,
       "items": { "type": "string" }
     },
     "systemic": { "type": "boolean" },
     "related_findings": {
       "type": "array",
+      "minItems": 1,
       "items": { "type": "string" }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/flow_coverage.schema.json

@@ -45,9 +45,9 @@
             "items": { "type": "string" }
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/repo_manifest.schema.json

@@ -13,7 +13,7 @@
         "root": { "type": "string" },
         "default_branch": { "type": "string" }
       },
-      "additionalProperties": true
+      "additionalProperties": false
     },
     "generated_at": { "type": "string" },
     "files": {
@@ -24,14 +24,14 @@
         "properties": {
           "path": { "type": "string" },
           "language": { "type": "string" },
-          "size_bytes": { "type": "integer" },
+          "size_bytes": { "type": "integer", "minimum": 0 },
           "hash": { "type": "string" },
           "excluded": { "type": "boolean" },
           "exclusion_reason": { "type": "string" }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/risk_register.schema.json

@@ -26,9 +26,9 @@
             "items": { "type": "string" }
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/runtime_validation_report.schema.json

@@ -14,7 +14,7 @@
           "task_id": { "type": "string" },
           "status": {
             "type": "string",
-            "enum": ["pending", "confirmed", "not_confirmed", "inconclusive"]
+            "enum": ["pending", "confirmed", "not_confirmed", "inconclusive", "not_required"]
           },
           "summary": { "type": "string" },
           "evidence": {
@@ -26,9 +26,9 @@
             "items": { "type": "string" }
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/runtime_validation_tasks.schema.json

@@ -18,10 +18,16 @@
           },
           "target_paths": {
             "type": "array",
+            "minItems": 1,
             "items": { "type": "string" }
           },
           "reason": { "type": "string" },
           "priority": { "type": "string", "enum": ["high", "medium", "low"] },
+          "command": {
+            "type": "array",
+            "minItems": 1,
+            "items": { "type": "string" }
+          },
           "suggested_checks": {
             "type": "array",
             "items": { "type": "string" }
@@ -31,9 +37,9 @@
             "items": { "type": "string" }
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/surface_manifest.schema.json

@@ -17,7 +17,10 @@
             "enum": ["interface", "background"]
           },
           "entrypoint": { "type": "string" },
-          "exposure": { "type": "string" },
+          "exposure": {
+            "type": "string",
+            "enum": ["network", "local"]
+          },
           "methods": {
             "type": "array",
             "items": { "type": "string" }
@@ -27,9 +30,9 @@
             "items": { "type": "string" }
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/schemas/unit_manifest.schema.json

@@ -25,6 +25,7 @@
           },
           "required_lenses": {
             "type": "array",
+            "minItems": 1,
             "items": {
               "type": "string",
               "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment"]
@@ -35,9 +36,9 @@
             "items": { "type": "string" }
           }
         },
-        "additionalProperties": true
+        "additionalProperties": false
       }
     }
   },
-  "additionalProperties": true
+  "additionalProperties": false
 }

package/skills/audit-code/SKILL.md

@@ -17,12 +17,24 @@ Normal usage should:
 - avoid manual paths, provider flags, and model-selection arguments
 - advance the audit automatically until it completes or no further automatic progress is possible
 
+Semantic review should stay with the active conversation agent by default.
+If the host can delegate to subagents, that fan-out belongs to the host agent runtime rather than to repo-local backend provider settings.
+
 Bounded steps are a backend implementation detail, not the intended user experience.
 
 ## Embedded Prompt Payload
 
-For IDE-based LLMs (Antigravity, Copilot, Cursor), you can initialize the skill natively by importing the prompt payload defined in `audit-code.prompt.md`.
-This provides the LLM an exact instruction set required to natively intercept the state machine blocking phases securely and assume the responsibilities of the execution "worker".
+The prompt payload in `audit-code.prompt.md` remains the canonical instruction asset.
+
+The preferred setup path is:
+
+```bash
+audit-code install
+```
+
+That bootstrap writes repo-local host assets for Codex, Claude Desktop, OpenCode, VS Code, and Antigravity plus shared MCP setup guidance.
+
+Use direct prompt import only when the target host still needs it after bootstrap.
 
 ## Repo-local fallback
 
@@ -49,6 +61,8 @@ For repo-local backend usage:
 - `provider: "auto"` is the explicit opt-in best-effort routing mode
 - explicit provider names remain available when an operator wants a specific backend
 
+Those explicit provider names are backend compatibility bridges, not the intended default review owner.
+
 ## Development rule
 
 Prefer the skill-first conversational contract over the CLI-first backend shape.

package/skills/audit-code/audit-code.prompt.md

@@ -57,14 +57,11 @@ Continue repeating Steps 1 through 5 as necessary. The state machine will iterat
 ## Step 7: Presentation
 
 Once the audit is officially complete, DO NOT run the orchestrator again.
-Instead, use your file reading tool to consume:
+Instead, read the final deterministic report at:
 
-- `.audit-artifacts/synthesis_report.json`
+- `audit-report.md`
 
-Finally, present the completed audit back to the user in this order:
+Present the completed audit back to the user with the work blocks first, since
+they are the primary remediation handoff units.
 
-1. A **Work Blocks** section summarizing `synthesis_report.work_blocks` first, because those are the primary actionable remediation groups.
-2. A polished **Markdown Summary Table** for the highest-signal merged findings.
-3. A concise semantic **Root Cause Clusters** summary based on `synthesis_report.root_cause_clusters`.
-
-Wait for the user to ask you to begin resolving or patching the work blocks or clusters you discovered.
+Wait for the user to ask you to begin resolving one or more work blocks.

package/schemas/merged_findings.schema.json

@@ -1,19 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "merged_findings.schema.json",
-  "title": "Merged Findings",
-  "type": "object",
-  "required": ["findings"],
-  "$defs": {
-    "Finding": {
-      "$ref": "finding.schema.json"
-    }
-  },
-  "properties": {
-    "findings": {
-      "type": "array",
-      "items": { "$ref": "#/$defs/Finding" }
-    }
-  },
-  "additionalProperties": false
-}

package/schemas/root_cause_clusters.schema.json

@@ -1,28 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "root_cause_clusters.schema.json",
-  "title": "Root Cause Clusters",
-  "type": "object",
-  "required": ["clusters"],
-  "properties": {
-    "clusters": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["id", "title", "finding_ids"],
-        "properties": {
-          "id": { "type": "string" },
-          "title": { "type": "string" },
-          "summary": { "type": "string" },
-          "finding_ids": {
-            "type": "array",
-            "items": { "type": "string" },
-            "minItems": 1
-          }
-        },
-        "additionalProperties": true
-      }
-    }
-  },
-  "additionalProperties": true
-}

package/schemas/synthesis_report.schema.json

@@ -1,61 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "synthesis_report.schema.json",
-  "title": "Synthesis Report",
-  "type": "object",
-  "required": ["summary", "merged_findings", "root_cause_clusters"],
-  "properties": {
-    "summary": {
-      "type": "object",
-      "required": [
-        "finding_count",
-        "cluster_count",
-        "runtime_validation_status_breakdown"
-      ],
-      "properties": {
-        "finding_count": { "type": "integer" },
-        "cluster_count": { "type": "integer" },
-        "runtime_validation_status_breakdown": {
-          "type": "object",
-          "additionalProperties": { "type": "integer" }
-        },
-        "notes": {
-          "type": "array",
-          "items": { "type": "string" }
-        }
-      },
-      "additionalProperties": true
-    },
-    "merged_findings": {
-      "type": "array",
-      "items": { "$ref": "finding.schema.json" }
-    },
-    "root_cause_clusters": {
-      "type": "array",
-      "items": {
-        "$ref": "#/$defs/cluster"
-      }
-    }
-  },
-  "$defs": {
-    "cluster": {
-      "type": "object",
-      "required": ["id", "title", "finding_ids"],
-      "properties": {
-        "id": { "type": "string" },
-        "title": { "type": "string" },
-        "summary": { "type": "string" },
-        "finding_ids": {
-          "type": "array",
-          "items": { "type": "string" }
-        },
-        "recommended_actions": {
-          "type": "array",
-          "items": { "type": "string" }
-        }
-      },
-      "additionalProperties": true
-    }
-  },
-  "additionalProperties": true
-}